How to deal with Indices changes from template to index_patterns?

Hello,

I'm planning to upgrade from 5.6.2 to 6.2.1 and looking into the cluster checkup on the upgrade assistant I saw that the template field in templates will be no longer used in 6.2.X and that I should use the index_patterns field, so, reading the documentation I understood that I need to upgrade, and before starting indexing I should re-upload my templates changing the 'template' field to 'index_patterns', is that right?

For example, i just need to change this:

{
  "order": 0,
  "version": 1,
  "template": "kaspersky-*",
  "settings": {
< rest of the template >

To this:

{
  "order": 0,
  "version": 2,
  "index_patterns": "kaspersky-*",
  "settings": {
< rest of the template >

Is that right?

Also, how to deal with existing indices? I have some monthly index and for what I know the template is only looked up when the index is created, how I should proceed in these cases?

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.